Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462

  • Size

    5.9MB

  • Sample

    240628-jwnt8syfjd

  • MD5

    c33e71d23c8bc915bac8e70c39f3a930

  • SHA1

    5826bc9cae78700b301f68449d43387bde2774e7

  • SHA256

    22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462

  • SHA512

    f598e74e2c6bd3ae89a4fe9bac8b05cadfec9d080fc06e6e6c4ebb75d584a3f007630a1f82e7ee578fa7ab20e8a08a79c6713762728a440644d1697e1e824bb1

  • SSDEEP

    98304:jVGSguAD8sdU6W9TxRU0Aud3Lwh68wRebfroRepeaUyPgNxwEV/Vb3ljegRaA1om:jf/M8cwl3Lwh69R0fIFuPwrDd+A1

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462

    • Size

      5.9MB

    • MD5

      c33e71d23c8bc915bac8e70c39f3a930

    • SHA1

      5826bc9cae78700b301f68449d43387bde2774e7

    • SHA256

      22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462

    • SHA512

      f598e74e2c6bd3ae89a4fe9bac8b05cadfec9d080fc06e6e6c4ebb75d584a3f007630a1f82e7ee578fa7ab20e8a08a79c6713762728a440644d1697e1e824bb1

    • SSDEEP

      98304:jVGSguAD8sdU6W9TxRU0Aud3Lwh68wRebfroRepeaUyPgNxwEV/Vb3ljegRaA1om:jf/M8cwl3Lwh69R0fIFuPwrDd+A1

    Score
    10/10
    rhadamanthysstealer

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks